86 matches found
Monolith Lithtech Game Engine Multiple Remote Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be supplied directly to vulnerable functions from...
FUN labs Game Engine Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12862/info Multiple FUN labs games are affected by remote denial of service vulnerabilities. A remote attacker can cause a game server to stop responding by sending an empty UDP packet. Another vulnerability can allow a...
Serious Sam Engine 1.0.5 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8936/info It has been reported that Serious Sam game engine is vulnerable to a remote denial of service vulnerability due to a failure to handle exceptional conditions. This issue occurs when the client sends a certain...
Digital Reality Game Engine 1.0.x Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9736/info It has been reported that the Digital Reality Game engine is prone to a remote denial of service vulnerability. This issue is due to a failure of the application to validate packet data size input supplied by a...
RedStorm Ghost Recon Game Engine Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9738/info The Ghost Recon Game Engine has been reported prone to a denial of service vulnerability. When handling text strings, the Ghost Recon Game Engine employs a 32-bit integer string size prefix in order to monitor t...
gMotor2 Game Engine - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25358/info The gMotor2 game engine is prone to multiple code-execution and denial-of-service vulnerabilities. Four vulnerabilities were reported. These vulnerabilities may be triggered by malicious client requests to game...
Gaming Platforms as an attack vector against remote systems
Little more than a year ago I wrote about the possibility to attack gaming platform to compromise large audience of gamers in stealthy way, the access to millions of machines represent a dream for every attackers and I hypnotized its repercussion in cyber warfare domains. Gaming platform are...
Steam Browser Protocol Vulnerability can allow hackers to hijack PC
Italian security Researchers Luigi Auriemma and Donato Ferrante from 'ReVuln' reported the flaw in Steam Browser Protocol. Stream the popular online distribution platform with 54 million users. The flaw allow the attacker to write arbitrary text to file and direct victims to external payloads and...
Unity 3D Web Player 3.2.0.61061 - Denial of Service
Unity 3D Web Player 3.2.0.61061 - Denial of Service Luigi Auriemma Application: Unity 3D web player http://unity3d.com/webplayer/ Versions: = 3.2.0.61061 Platforms: Windows Bug: heap corruption Exploitation: remote Date: 21 Feb 2012 Author: Luigi Auriemma e-mail: [email protected] web:...
Unity 3D Web Player 3.2.0.61061 - Denial of Service
Luigi Auriemma Application: Unity 3D web player http://unity3d.com/webplayer/ Versions: = 3.2.0.61061 Platforms: Windows Bug: heap corruption Exploitation: remote Date: 21 Feb 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...
ioQuake3 game engine security vulnerabilities
Shell characters vulnerability, code execution...
Quake 3 Shell Injection / Code Execution
Hello, Quake 3 is a popular online first person shooter developed by IDsoftware 1 that has been released in 1999 and is still widely played. After the release of the source code under the GPL, the ioQuake3 project 2 was started that is dedicated to maintaining the existing codebase. Several game...
Monolith Lithtech Game Engine - Memory Corruption
source: https://www.securityfocus.com/bid/41851/info Monolith Lithtech Game Engine is prone to a memory-corruption vulnerability. An attacker can exploit this issue to cause a denial-of-service condition, or execute arbitrary code within the context of the affected application. Other attacks may...
Monolith Lithtech Game Engine - Memory Corruption
Monolith Lithtech Game Engine - Memory Corruption source: https://www.securityfocus.com/bid/41851/info Monolith Lithtech Game Engine is prone to a memory-corruption vulnerability. An attacker can exploit this issue to cause a denial-of-service condition, or execute arbitrary code within the conte...
Lithtech Engine - Memory Corruption
Original Advisory: http://aluigi.org/adv/fearless-adv.txt Luigi Auriemma Application: Lithtech engine http://www.lithtech.com Games: any game should be affected, refer to http://en.wikipedia.org/wiki/LithtechLithtechimplementations those personally tested by me are: F.E.A.R. = 1.08 F.E.A.R. 2...
Torque Game Engine - Multiple Denial of Service Vulnerabilities
Torque Game Engine - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/40102/info Torque Game Engine is prone to multiple denial-of-service vulnerabilities. An attacker with valid login credentials can exploit these issues to cause the application using the engi...
Torque Game Engine - Multiple Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/40102/info Torque Game Engine is prone to multiple denial-of-service vulnerabilities. An attacker with valid login credentials can exploit these issues to cause the application using the engine to crash, resulting in a denial-of-service condition. Other...
Unreal game engine multiple security vulnerabilities
Server integer overflow, client format string vulnerability...
Debian Security Advisory DSA 856-1 (py2play)
The remote host is missing an update to py2play announced via advisory DSA 856-1. Arc Riley discovered that py2play, a peer-to-peer network game engine, is able to execute arbitrary code received from the p2p game network it is connected to without any security checks. The old stable distribution...
Debian: Security Advisory (DSA-856-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...